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CLAIMS 



1 ^„ authentication system including a plurality of wireless 
IC tags and an authentication apparatus which permits a user 
to -use a function provided by the authentication apparatus .f 
authenticity of the user is certified by authentication, 
the authentication apparatus comprising: 
a tag verification information storage unit operable to 
.tore a plurality of pieces of tag verification information for 
identifying the plurality.of wireless IC tags respectively; 

a receiving unit operable to wirelessly receive, from 
„ireless XC tags attached to objects carried by the user, a 
plurality of pieces of tag certification information for 
identifying the wireless XC tags attached to the objects 
respectively; 

a tag judgment unit operable to judge whether or not a 
levelofmatchbetweenthepluralityofpiecesoftagverification 

information and the plurality of pieces of tag certification 
information satisfies a predetermined condition; and 

a permission unit operable to permit a use of the function 
If the tag judgment unit judges that the level of match satisfies 
the predetermined condition, and 

each of the plurality of wireless IC tags comprising: 
a tag certification information storage unit operable to 
, store a piece of tag certification information for identifying 
a Wireless IC tag storing the piece of tag certification 
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information; and 

an output unit ope.able to output wireleasly the p.ece 

of tag certification information. 

, 2 ■ .„ authentication apparatus which permits a user to use a 
.Inction proviCea .V the authentication apparatus rf 

■ „=-^nfiad bv authentication, tne 
authenticity of the user is certified by 

authentication apparatus comprising: 

a tag verification information storage unit operable to 
. store a plurality of pieces of tag verification information for 
identifying a plurality of wireless IC tags respectively 

a receiving unit operable to wirelessly receive, from 
.i.eless XC tags attached to objects carried by the user a 
plurality of Pieces of tag certification information for 
identifying the wireless IC tags attached to the objects 
respectively; 

a tag judgment unit operable to iudge whether or not 
.evelofmatchbetweenthepluralityofpiecesoftagverification 

information and the plurality of pieces of tag certification 
,0 information satisfies a predetermined condition; and 

a permission unit operable to permit a use of the function 

■ ^ vv,ai- 1-he level of match satisfies 
if the tag judgment unit judges that the leve 

the predetermined condition. 

3 The authentication apparatus Of Claim 2 further comprising: 
an identification information storage unit operable to 
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Store first identification information; and 

a user judgment unit operable to, if the tag judgment unit 
judges that the level of match does not satisfy the predetermined 
condition, receive second identification information and judge 
whether or not the first Identification information matches the 
received second identification information, wherein 

the permission unit permits the use of the function if 
the tag judgment unit Judges that the level of match does not 
satisfy the predetermined condition, and If the user judgment 
unit judges that the first identification information batches 
the received second identification information. 

4. The authentication apparatus of Claim 3, wherein 

the first identification information is either (1) first 
Character Information being a combination of one or more numerals 
and/or one or more alphabets and/or one or more signs or (ii) 
first biological information indicating biological 

characteristics of the user, 

the second Identification information is either (1) second 

character information being a combination of one or more numerals 
and/or one or more alphabets and/or one or more signs or (ii) 
second biological information indicating biological 
characteristics of the user, 

if the user judgment unit receives the second character 
information, the user judgment unit judges whether or not the 
first character information matches the received second 
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Character information, and if the user judgment unit receives 
the second biological information, the user judgment unit judges 
whether or not the first biological information and the received 
second biological information correspond to a same user. 

5. The authentication apparatus of Claim 2, wherein 

the plurality of pieces of tag verification information 
are a plurality of verification ID codes for identifying the 
plurality of wireless IC tags respectively, 

the plurality of pieces of tag certification information 
are a plurality of certification ID codes for identifying the 
wireless IC tags attached to the objects respectively, and 
the authentication apparatus further comprises 
an update unit operable to, if a predetermined condition 
for update is satisfied, acquire at least two certification ID 
codes out of the plurality of certification ID codes received 
by the receiving unit , and update contents of the tag verification 
information storage unit by storing the at least two acquired 
certification ID codes into the tag verification information 
storage unit as verification ID codes. 

6. The authentication apparatus of Claim 5 further comprising: 
an identification information storage unit operable to 

store first identification information; and 

a user judgment unit operable to receive second 

identification information and judge whether or not the first 



wo 2005/085980 



PCT/JP2005/004581 



identification information matches the received second 
identification information, wherein 

the predetermined condition for update is that the first 
identification information matches the second identification 

information, and 

the update unit updates the contents of the tag 
verification information storage unit if the first 

identification information matches the second identification 

information . 

, The authentication apparatus of Claim 5 further comprising: 
a distance calculating unit operable to calculate values 
of a distance between the authentication apparatus and each of 
the wireless IC tag3 from which the plurality of certification 
ID codes have been received, wherein 

the update unit acquires at least two certification ID 
codes for which calculated values of the distance are each equal 
to or lower than a predetermined value, from the plurality of 
received certification ID codes. 

8. The authentication apparatus of Claim 5, wherein 

each of the plurality of certification ID codes contains 
a type code indicating a type of an object to which a wireless 
IC tag identified by the certification ID code is attached, 
) wherein 

the update unit acquires at least two certification ID 
170 
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codes containing a predetermined type code, from the plurality 
of certification 10 codes received by the receiving unit. 

9 The authentication apparatus of Claim 8 further comprising: 
■ a priority level storage unit operable to store a plurality 
of priority levels with a plurality of type codes corresponding 

thereto, wherein 

the predetermined type code is correlated with priority 
levels thatareecualtoorhigherthanapriority-levelthreshold 

value, and 

the update unit acquires at least two certification ID 
codes that have priority levels that are equal to or higher than 
the priority-level threshold value, from the plurality of 
certification ID codes received by the receiving unit, and 
updates contents of the tag verification information storage 
unit by storing the at least two acquired certification ID codes 
into the tag verification information storage unit as 
verification ID codes by priority. 

, 10. The authentication apparatus of Claim 9 further comprising: 
a priority level update unit operable to receive a type 
code and a priority level, and update the priority level storage 
unitbyreplacingaprioritylevel.whichisstoredinthepriority 

level storage unit in correspondence with the recelvedtype code, 
!6 with the received priority level. 
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• nnaratus of Claim 8 further comprising: 



wherein 



10 



^^r-rPlated with point 

value, and certification ID 

update unit a.ou.res at 

.des t.at .a,e point .aiue. t.at ^ Z^^^^ 

4-Hr-^shold value, from tne f 

^""^'.^ ; received . receiving unit, and 

.ertificatron 0 code ^^^^^^^^^^^^ ^^^^^^^ 

„pdates contents o. t . ,,,,,,,...ion XO code. 

, verification ID codes by priority. 

^ riaim 11 further 
..e authentication apparatus of 

comprising: „erable to receive a type code and 

a point update unrt operable ..placing 
odate the point storage unit by repia 
3 pcint value, and update P ^^^^^^^ ^^^^ 

a point value, which is stored r U^ ^^^^^^^^ 
correspondence with the received type CO 

point value. 

ripim 2, wherein 
- - authentication appara^s .^^^^^^^^ 

the plurality of pieces of tag 



25 

the plurality of pieces 
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10 



a plurality of pieces of unique authentication data for • 

verification assigned by the authentication apparatus, 

the plurality of pieces of tag certification ln£orn,atron 

„e a plurality of pieces of unique authentication data for 

ce^tiflcatlon assigned by the authentication apparatus, 

the receiving unit wlrelessly receives, fro. the wireless 

xc tags attached to the objects, a plurality of 10 codes for 

. I o«= TP taas attached to the objects 
identifying the wxreless IC tags 

respectively; 

the authentication apparatus further comprises: 
an update unit operable to, if a predetermined condition 
,or update is satisfied, generate a different piece of 
authentication data for each 10 code received by the receiving 
.nit, acquire at least two pieces of authentication data from 
pieces Of generated authentication data, and update contents 
tag verification information storage unit by storing the 
at least two pieces of acquired authentication data into the 
tagverlficatlonlnfor^atlonstorageunltasauthentlcationdata 

for verification; and 

a transmission unit operable to transmit, for each piece 
of authentication data for verification having been updated by 
the update unit, a piece of authentication data for verification 
asapieceofauthenticationdataforcertification,toawireless 

IC tag having an 10 code corresponding to the piece of 
25 authentication data for verification. 
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^■F riaim 13 further 
14. The authentication apparatus o£ Claim 



comprising: 



Tlntification .n£o»at.on sto.a.e .nit ope.a.ie to 
store .ir.t identification information., an. ^ 
, - a user judgment unit operable to 

-ti.cat.on information and .de.et.r or n^^^^^^^^^^^ 

identification information matches the 
identification information, wherein 

..e predetermined condition for update is that the first 
.0 identification information matches the second identification 

information r and 

..thefirstidentificationinformationmatchesthesecond 

identification information, 

,.e opdate unit updates the contents of the tag 
.erlfication Information storage unit and 

the transmission unit transmits, for 
authentication datafor.erificationha.ing been updated..t^ 

update unit, a piece of authentication data for .erific 
lapieceof authentication data for certification, toawirele 
,0 XC tag having an .0 code corresponding to the piece 
authentication data for verification. 

■ ^-F n aim 13 further 

15. The authentication apparatus of Claim 
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' wirele.s XC ta,s ,ro. which the plurality of 10 codes have ■ 

been received, wherein 

« if^3st two pieces of 

the update unit acquires at least 

authentication data corresponding to 10 codes for which 
. cal-culated values of the distance are each equal to or lower 
than a predetermined value, a»o„. the plurality of received 
codes . 

16 The authentication apparatus of Clai™ 13, wherein 

each Of the plurality of 10 codes contains a type code 
indicatin.atypeofano«ecttowhichawirelessXCtaqidentified 

by the ID code is attached, wherein 

the update unit acquires at least two pieces o, 
authentication data correspondinq to XO codes that include a 
predetermined type code a.onq the plurality of XO codes received 
by the receiving unit- 

17 The authentication apparatus of Claim 2, wherein 

each Of the plurality of pieces of taq certification 
,0 information contains a type code indicatinq a type of an object 
to Which a wireless XC taq identified by the piece of taq 
certification information is attached, wherein 

the tag Judgment unit Judges whether or not a level of 
match between the plurality of pieces of tag verification 
information and one or more pieces of tag certification 
information, which remain after excluding, from the plurality 
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' pieces o« ta. ce...ica..on .n.o™a..on .ece.ve. ^ 
.ece^in. uni., pieces o. .a, ce.t..ica.ion i„.o™a..on t.a. 

satisfies a predetermined 
contain a predetermined type code, sat.sfx 

condition. 

,8 The autnentication apparatus of Claim 2, wUerein 

tag verification information storage unit further 
stores e.piration date/time information t.at indicates an 
Lpiration date.time of each piece of tag verification 

10 information, and 

the authentication apparatus further comprises 
3 control unit operable to, if having fudged that any 
..piration date.time of the plurality ^ ^ 
.erification information has not heen reached, oontro t^ 
to receive the plurality of pieces of tag 
15 receiving unit to receiv 

certification information. 

„ .he authentication apparatus of Claim 2, wherein 

the tag judgment unit Judges whether or not a ratio of 
,0 a. a number of pieces of tag verification information that, 
among the plurality of pieces of tag verification information, 
.tchany of the plurality of Pieces of ^^^^^^^^ 
information to Ui, a total number of the plurality o Pi ce 
.3g verification information stored in the tag verification 



value. 
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20. The authentication apparatus of Claim 2. wherein 

the tag verification information storage unit further 
stores point values indicating weights assigned to the plurality 
or pieces of tag verification information, in correspondence 
with the plurality of pieces of tag verification information. 



and 



the tag judgment unit judges whether or not a ratio of 
(i) an acquired point value that is obtained by adding up point 
values corresponding to pieces of tag verification information 
that, among the plurality of pieces of tag verification 
informatior., match any of the plurality of pieces of tag 
certification information to (ii) a total point value that is 
obtained by adding up point values corresponding to the plurality 
of pieces of tag verification information stored in the tag 
verification information storage unit is equal to or higher than 
a standard value. 

21. The authentication apparatus of Claim 2, wherein 

the t ag verification information storage unit is a portable 

recording naedium, and 

the portable recording medium is inserted in the 

authentication apparatus. 

22. An authentication method for an authentication apparatus 
which permits a user to use a function provided by the 
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authentication apparatus if authenticity of the user is certified • 
by authentication, 

the authentication apparatus comprising: 
a tag verification information storage unit operable to 
stSre a plurality of pieces of tag verification information for 
identifying a plurality of wireless IC tags respectively, and 
the authentication method comprising the steps of: 
wirelessly receiving, from wireless IC tags attached to 
objects carried by the user, a plurality of pieces of tag 
certification information for identifying the wireless IC tags 
attached to the objects respectively; 

judging whether or not a level of match between the 
plurality of pieces of tag verification Information and the 
plurality of pieces of tag certification information satisfies 
a predetermined condition; and 

permitting a use of the function if it Is Judged in the 
above step that the level of match satisfies the predetermined 



condition . 



23. 



An authentication program for an authentication apparatus 
which permits a user to use a function provided by the 
authenticationapparatusifauthenticityoftheuseriscertified 

by authentication, 

the authentication apparatus comprising: 
a tag verification information storage unit operable to 
store a plurality of pieces of tag verification information for 
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identifying a plurality of wireless IC tags respectively, and 
the authentication program comprising the steps of: 
wirelessly receiving, from wireless IC tags attached to 

objects carried by the user, a plurality of pieces of tag 

certification information for identifying the wireless IC tags 

attached to the objects respectively; 

judging whether or not a level of match between the 

plurality of pieces of tag verification information and the 

plurality of pieces of tag certification information satisfies 

a predetermined condition; and 

permitting a use of the function if it is judged in the 

above step that the level of match satisfies the predetermined 

condition. 

24 . A computer-readable recording medium recording therein an 
authentication program that causes a computer to operate as an 
authentication apparatus which permits a user to use a function 
provided by the authentication apparatus if authenticity of the 
user is certified by authentication, 

the authentication apparatus comprising: 
a tag verification information storage unit operable to 
store a plurality of pieces of tag verification information for 
identifying a plurality of wireless IC tags respectively, and 
the authentication program comprising the steps of: 
wirelessly receiving, from wireless IC tags attached to 
objects carried by the user, a plurality of pieces of tag 
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certification information for identifying the wireless IC tags 
attached to the objects respectively; 

judging whether or not a level of match between • the 
plurality of pieces of tag verification information and the 
plurality of pieces of tag certification information satisfies 
a predetermined condition; and 

permitting a use of the function if it is judged in the 
above step that the level of match satisfies the predetermined 
condition . 
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